Method and system for monitoring the state of health of an electronic data carrier

Abstract

In an embodiment, a method for monitoring the state of health of an electronic data carrier involves using a reader device to determine the state of health of the electronic data carrier by reading a parameter value indicative of a state of health from the electronic data carrier. In an embodiment, a system for monitoring a state of health of an electronic data carrier comprising a reader device operable to read data from the electronic data carrier. The reader device is arranged to determine the state of health of the electronic data carrier by reading a parameter value indicative of the state of health from the electronic data carrier.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS

This application claims the priority under 35 U.S.C. §119 of European patent application no. 12184723.0, filed on Sep. 17, 2012, the contents of which are incorporated by reference herein.

FIELD OF THE INVENTION

The invention relates to a method for monitoring the state of health of an electronic data carrier. The invention further relates to a system for monitoring the state of health of an electronic data carrier.

BACKGROUND OF THE INVENTION

Electronic data carriers for identification systems are typically embedded in contact-bound smart cards, contactless smart cards, e-passports and Radio Frequency Identification (RFID) tags.

A smart card, chip card, or Integrated Circuit Card (ICC), is any pocket-sized card with embedded integrated circuits. A smart card typically contains memory components and microprocessor components. Smart cards can perform identification, authentication, data storage and application processing functions. The benefits of smart cards are directly related to the volume of information and applications that are programmed for use on a card. A single contact-bound or contactless smart card can be programmed with multiple banking credentials, medical entitlement, driver's license/public transport entitlement, loyalty programs and club memberships, for example. Multi-factor and proximity authentication is typically embedded into smart cards to increase the security of all services on the card. For example, a smart card can be programmed to only allow a contactless transaction if it is also within range of another device like a uniquely paired mobile phone. This can significantly increase the security of the smart card.

Governments gain a significant enhancement to the provision of publicly funded services through the increased security offered by smart cards. These savings are passed onto society through a reduction in the necessary funding or enhanced public services. Individuals gain increased security and convenience when using smart cards designed for interoperability between services. For example, consumers only need to replace one card if their wallet is lost or stolen. Additionally, the data storage available on a card could contain medical information that is critical in an emergency should the card holder allow access to this.

Electronic passports (e-passports) typically contain an electronic data carrier comprising a chip which carries personal data of the passport holder and which can be read-out by reader devices at airports, checkpoints etc. What makes e-passports “electronic” is the small RFID device embedded in the passport, which consists of a small data carrier chip and an antenna that allows passport information to be transmitted to reader devices via radio signals. Electronic passports contain the same information as non-electronic passports—name, date of birth, sex, place of birth, nationality etc.—but they also typically include biometric information like fingerprints, facial characteristics, DNA, and iris characteristics. Digital signature technology verifies the authenticity of the data stored on the chip.

RFID tags are typically attached to objects for the purposes of automatic identification and tracking RFID refers to the use of RF fields to transfer data from and to the tags. Some tags require no battery and are powered by the electromagnetic fields used to read them (passive tags). Others use a local power source and emit radio waves (electromagnetic radiation at radio frequencies) (active tags). The tags typically contain electronically stored information which can be read from up to several meters away. Unlike bar codes, the tags do not need to be within line of sight of a reader device and may also be embedded in the tracked object.

RFID tags are used in many industries. An RFID tag attached to an automobile during production can be used to track its progress through the assembly line, for example. Pharmaceuticals can be tracked through warehouses. Livestock and pets may have tags injected, allowing positive identification of the animal. RFID identity cards can give employees access to locked areas of a building, and RFID transponders mounted in automobiles can be used to bill motorists for access to toll roads or parking.

While the use of smart cards and tags in everyday life increases, for example for travelling, making payments, identification, authorization etc., there is an increased dependence on the reliable functioning of these cards and tags. Their widespread application demands them to be durable to avoid unwanted inconveniences to their users. However, the durability of such cards and tags comes into question because of the following reasons:

• • They are subjected to varied stressful conditions like humidity, freezing temperatures, high temperatures, shock, vibration (e.g. in washing machines), bending (mechanical strain) etc.
  • The electronic components used in these cards belong to smaller technology nodes, such as 65 nm and smaller, which are more likely to suffer from defects, for example from Time Dependent Dielectrical Breakdown (TDDB), Hot Carrier Injection (HCI), electro migration, increased leakage current, etc.
  • Applications such as e-passports have a lifetime of around ten years and typically a smart card is expected to have a lifetime of around two to three years.

It is expected that a lack of adequate solutions for assessing the state of health of electronic data carriers of the kind set forth will create significant inconveniences for users. For example, a failing smart card is highly inconvenient for a user in a society that increasingly relies on the use of smart electronics for automated identification, authorization and payment. Assessing the state of health of the electronic data carriers may aid in preventing failure of said electronic data carriers.

SUMMARY OF THE INVENTION

It is an object of the invention to provide an adequate solution for determining the state of health of electronic data carriers of the kind set forth, thereby improving the reliability of said electronic data carriers. This object is achieved by a method for monitoring the state of health of an electronic data carrier as defined in claim 1. This object is also achieved by a system for monitoring the state of health of an electronic data carrier as defined in claim 13.

According to an aspect of the invention, a method for monitoring the state of health of an electronic data carrier is conceived, wherein a reader device operable to read data from said electronic data carrier determines the state of health of the electronic data carrier by reading a parameter value indicative of said state of health from the electronic data carrier.

According to an exemplary embodiment of the invention, the parameter value is indicative of a change in the amount of power required to read data from the electronic data carrier.

According to a further exemplary embodiment of the invention, the amount of power required to read data from the electronic data carrier is derived from the performance of a power rectifier embedded in said electronic data carrier.

According to a further exemplary embodiment of the invention, the performance of said power rectifier is determined by monitoring the voltage ripple of the power rectifier.

According to a further exemplary embodiment of the invention, the performance of said power rectifier is determined by repeatedly comparing the power received at an input of the power rectifier with the power delivered at an output of the power rectifier.

According to a further exemplary embodiment of the invention, the performance of said power rectifier is determined by monitoring the operation of a shunt regulator embedded in the electronic data carrier.

According to a further exemplary embodiment of the invention, the parameter value is indicative of a change of the resonant frequency of the electronic data carrier.

According to a further exemplary embodiment of the invention, the parameter value is indicative of a change of the Q-factor of an antenna embedded in the electronic data carrier.

According to a further exemplary embodiment of the invention, the parameter value is indicative of a change of the duty factor of an ASK load modulator embedded in the electronic data carrier.

According to a further exemplary embodiment of the invention, the parameter value is indicative of a change of the response time of the electronic data carrier.

According to a further exemplary embodiment of the invention, the parameter value is indicative of an error rate in the communication between the reader device and the electronic data carrier.

According to a further exemplary embodiment of the invention, the reader device compares said parameter value with further parameter values, said further parameter values being indicative of the state of health of further electronic data carriers.

According to a further exemplary embodiment of the invention, the present state of health of the electronic data carrier is determined by a dedicated interaction between the reader device and the electronic data carrier.

According to a further aspect of the invention, a system for monitoring the state of health of an electronic data carrier is provided, the system comprising a reader device operable to read data from said electronic data carrier, wherein said reader device is arranged to determine the state of health of the electronic data carrier by reading a parameter value indicative of said state of health from the electronic data carrier.

According to a further exemplary embodiment of the invention, the electronic data carrier is embedded in one of the group consisting of: a contact-bound smart card, a contactless smart card, an electronic passport, an RFID tag.

BRIEF DESCRIPTION OF THE DRAWINGS

The invention will be described in more detail with reference to the appended drawings, in which:

FIG. 1 shows a typical architecture of an RFID data carrier;

FIG. 2 shows a typical architecture of an RF interface of an inductively coupled RFID data carrier;

FIG. 3 shows an exemplary embodiment of a system for monitoring the state of health of an electronic data carrier in accordance with the invention;

FIG. 4 shows a voltage ripple of a power rectifier;

FIG. 5 shows an operating principle for voltage regulation in an RFID data carrier using a shunt regulator;

FIG. 6 shows a degradation of an RFID data carrier reflected by a change of the duty factor of an ASK load modulator embedded in said RFID data carrier;

FIG. 7 illustrates a classification of RFID data carriers in order to determine the state of health of a particular RFID data carrier.

FIG. 8 is a process flow diagram of a method for monitoring a state of health of an electronic data carrier in accordance with an embodiment of the invention.

DESCRIPTION OF EMBODIMENTS

FIG. 1 shows a typical architecture of an RFID data carrier, as described in the RFID Handbook by Klaus Finkenzeller, Third Edition, 2010. The RFID data carrier 100 comprises an antenna 102 and a data carrier chip 104. The data carrier chip 104 comprises an RF interface 106, address and security logic 110, a non-volatile memory 112 which is either an EEPROM or an FRAM, and a read-only memory 114. The RF interface 106 comprises a part which is configured as a power supply 108 for drawing energy from the RF field and supplying the functional components of the data carrier chip 104 with power.

FIG. 2 shows a typical architecture of an RF interface of an inductively coupled RFID data carrier, as described in the above-mentioned RFID Handbook. The RF interface 200 comprises a clock 202 which is arranged to generate a system clock CLK, a demodulator 204 which is arranged to generate a data output DO, a power rectifier 206 which is arranged to deliver a supply voltage V_cc and which is connected to a Zener diode ZD, and an ASK load modulator 208 which is arranged to load modulate a data input DI.

FIG. 3 shows an exemplary embodiment of a system for monitoring the state of health (SOH) of an electronic data carrier in accordance with the invention. In general, the state of health of the electronic data carrier represents an actual level of performance of the electronic data carrier compared to a benchmark, for example an expected or targeted level of performance. As such, the state of health also provides an indication of the level of degradation of the performance of the electronic data carrier. This level of degradation can be used to estimate the remaining useful lifetime of the electronic data carrier.

The SOH monitoring system 300 comprises the electronic data carrier 304 and a reader device 302. For example, the electronic data carrier 304 may be an RFID data carrier of the kind set forth and the reader device 302 may be a corresponding RFID reader. According to this exemplary embodiment, the reader device 302 requests 306 a parameter value relating to the SOH from the electronic data carrier 304. Subsequently, the electronic data carrier 304 sends 308 the requested parameter value to the reader device 302, such that the reader device 302 can draw a conclusion as to whether the SOH of the electronic data carrier 304 has degraded.

In the following, various SOH parameters are presented. The skilled person will appreciate that other SOH parameters could also be used to advantage. Furthermore, the skilled person will appreciate that combinations of the presented SOH parameters could be used to advantage.

FIG. 4 shows a voltage ripple of a power rectifier. According to a further exemplary embodiment of the invention, the SOH parameter value may be indicative of a change in the amount of power required to read data from the electronic data carrier 304. The amount of power required to read data from the electronic data carrier 304 may be derived from the performance of a power rectifier embedded in said electronic data carrier 304. For example, if the electronic data carrier is an RFID data carrier 100 (as shown in FIG. 1) the performance of the power rectifier 206 embedded in the RF interface 200 of the RFID data carrier 100 (as shown in FIG. 2) may be used for this purpose.

A relatively simple SOH monitor may determine the performance of the power rectifier by monitoring the voltage ripple of the power rectifier. It is assumed that the degradation of the electronic data carrier 304 is reflected in a change of the load characteristics (R and/or C) over time. A more advanced SOH monitor may determine the performance of the power rectifier by monitoring the rectifier efficiency, i.e. by repeatedly comparing the power received at an input of the power rectifier with the power delivered at an output of the power rectifier.

FIG. 5 shows an operating principle for voltage regulation in an RFID data carrier using a shunt regulator. In an RFID system, as shown in FIG. 3, the coupling between the reader device 302 and the electronic data carrier 304 will typically vary over time. In order to maximize the power supply level, the electronic data carrier 304 typically contains a shunt regulator. In such a system, monitoring the voltage ripple and the efficiency of the power rectifier together with the operating characteristics of the shunt regulator may provide a more precise indication of the degradation of the data carrier's power supply block.

If the electronic data carrier is an RFID data carrier (i.e. an RFID transponder) then the presence of the data carrier in the field generated by an RFID reader is noticeable through a change in impedance observed by the RFID reader. This so-called transformed transponder impedance is defined in the above-mentioned RFID Handbook, in particular in Section 4.1.10, Formula (4.50):

$Z_T^{\prime }=\frac{{\omega }^2{k}^2{L}_1{L}_2}{R_2+j\omega L_2+\frac{R_L}{1+j\omega R_L{C}_2}}$

Furthermore, a change of the resonant frequency f_RES of the transponder affects the transformed transponder impedance. Therefore, a structural change of the transponder's resonant frequency f_RES is a suitable indicator of a degraded state of health of said transponder. The RFID reader can determine the precise resonant frequency f_RES of the transponder by performing a frequency-sweep and an analysis of the response. The term “structural” refers to the fact that the determination of the resonant frequency is repeated in order to analyze the change of the resonant frequency over time.

Another suitable parameter for realizing a SOH monitor is a change of the Q-factor of the transponder's antenna. The Q-factor is defined in the above-mentioned RFID Handbook, in particular in Section 4.1.7, Formula (4.31):

$Q=\frac{1}{R_2\sqrt{\frac{C_2}{L_2}}+\frac{1}{R_L}\sqrt{\frac{L_2}{C_2}}}=\frac{1}{\frac{R_2}{\omega L_2}+\frac{\omega L_2}{R_L}}$

A change of the Q-factor can be caused by a change in resonant frequency, coil inductance and/or resistance (Section 11.4.3, Formula (11.8), of said RFID Handbook, wherein f_RES represents the resonant frequency). Furthermore, the bandwidth B of the transponder resonant circuit is inversely proportional to the Q-factor (Section 4.1.10, Formula (4.55), of said RFID Handbook).

$Q\text{-}\mathrm{factor}\text{:}Q=\frac{2\pi f_{\mathrm{res}}{L}_{\mathrm{coil}}}{R_{\mathrm{total}}}$ $\mathrm{Bandwidth}\text{:}B=\frac{f_{\mathrm{res}}}{Q}$

Thus, according to this exemplary embodiment of the invention, the resonant frequency f_RES of the transponder can also be measured by performing a frequency-sweep. If the resonant frequency f_RES of the transponder is measured, the contribution of the LR-ratio to the Q-factor can be derived. Changes in the LR-ratio can be used as an indicator of the state of health of the transponder.

Furthermore, if the system is based on RFID communication and Amplitude Shift Keying (ASK) is used as a modulation technique, then a change of the duty factor of the ASK load modulator may provide a good indication of the state of health of the transponder. In Section 6.2.1 of said RFID Handbook the duty factor m is defined by first calculating the mean U_m of the keyed and unkeyed level and subsequently the ratio between the difference and the mean:

$\mathrm{Mean}\text{:}{U}_m=\frac{U_0+U_1}{2}$ $\mathrm{Duty}\mathrm{factor}\text{:}m=\frac{\mathrm{abs}\left(U_0-U_1\right)}{U_m}$

FIG. 6 shows a degradation of an RFID data carrier reflected by a change of the duty factor of an ASK load modulator embedded in said RFID data carrier. An increased resistance results in a smaller difference between the unkeyed and keyed value while the mean value becomes larger. Similarly, a reduced modulator resistance over time will also be reflected in a change of the duty factor (not shown).

Furthermore, the parameter value may be indicative of a change of the response time of the electronic data carrier. In principle, the longer it takes for the electronic data carrier to respond, the higher the probability that the state of health of the electronic data carrier has degraded. This parameter may be combined with the above-described parameters in order to provide a more precise indication of the data carrier's state of health.

Furthermore, the parameter value may be indicative of an error rate in the communication between the reader device and the electronic data carrier. In particular, the state-of-health monitor may be arranged to observe an increase in the mean bit-error-rate (BER) per transaction or interaction.

FIG. 7 illustrates a classification of RFID data carriers in order to determine the state of health of a particular RFID data carrier. Basically, the reader device may also compare the state of health of the electronic data carrier with the state of health of other electronic data carriers. Thus, the reader device uses data gathered from other electronic data carriers of the same population by looking up this data in a database, for example.

In FIG. 7, each dot represents an individual RFID data carrier (for example, a smart card). The total population consists of a number of RFID data carriers and parameter value(s) for each RFID data carrier are monitored and known at a global level. Based on a value comparison a classification can be made as shown in the FIG. 7 (dashed ellipses). Outliers—having (a) significantly different parameter value(s)—can then be classified and used to determine the state of health of a particular RFID data carrier within the total population. In FIG. 7, RFID data carriers having a relatively bad state of health fall in the category marked with the −− sign, RFID data carriers having an average state of health fall in the category marked with the +− sign, and RFID data carriers having a good state of health fall in the category marked with the ++ sign. The skilled person will appreciate that other classifications are also possible, for example classifications having more than three categories.

The present state of health of an electronic data carrier may be determined by a dedicated interaction between a reader device and an electronic data carrier. This may be regarded as a “health-shake operation” between the reader device and the electronic data carrier, in analogy to a handshake operation in a client-server system, for example.

Summarizing, it is proposed to equip electronics in electronic data carriers and/or reader devices with a state-of-health (SOH) monitor for monitoring the state of health of said electronic data carriers. The SOH monitor keeps historic data (parameter values) such that a degradation of the state of health of an electronic data carrier over time can be observed. These historic data may be stored on the electronic data carrier, at the reader side or “in the cloud”.

The SOH monitor can be useful to signal a degraded health of a smart card to a user far in advance of an actual breakdown, for example. A typical use case is to issue a warning to the user or issuer of the card regarding this smart card approaching end-of-life (EOL). This allows the card owner or issuer to take preventive actions to avoid card failure, for example by scheduling timely replacement of the card. This avoids cases in which the user is left stranded, for instance, while travelling, without a readable passport, or an identification document or unable to perform a payment.

Besides user convenience, a SOH monitor of the kind set forth can be useful for two other purposes. The first is to perform (more) effective health management, e.g. by performing operations more conservatively and possibly impacting the Quality-Of-Service (QOS) but at the same time extending card lifetime. Another purpose of the SOH monitor could be to perform a security preserving action just prior to breakdown of the data carrier, for example by erasing its (flash) memory or activating a permanent reset condition to make it inoperable.

FIG. 8 is a process flow diagram of a method for monitoring a state of health of an electronic data carrier in accordance with an embodiment of the invention. At block 802, a parameter value indicative of the state of health from the electronic data carrier is requested using a reader device, where the parameter value is indicative of a change in the amount of power required to read data from the electronic data carrier, where the amount of power required to read data from the electronic data carrier is derived from the performance of a power rectifier embedded in said electronic data carrier, and where the performance of the power rectifier includes a power rectifier efficiency of the power rectifier. At block 804, the state of health of the electronic data carrier is determined based on the parameter value.

The above-mentioned embodiments illustrate rather than limit the invention, and the skilled person will be able to design many alternative embodiments without departing from the scope of the appended claims. In the claims, any reference sign placed between parentheses shall not be construed as limiting the claim. The word “comprise(s)” or “comprising” does not exclude the presence of elements or steps other than those listed in a claim. The word “a” or “an” preceding an element does not exclude the presence of a plurality of such elements. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage.

LIST OF REFERENCE SIGNS

• 100 RFID data carrier
• 102 antenna
• 104 data carrier chip
• 106 RF interface
• 108 power supply
• 110 address and security logic
• 112 EEPROM or FRAM
• 114 ROM
• 200 RF interface
• 202 clock
• 204 demodulator
• 206 power rectifier
• 208 ASK load modulator
• CLK system clock
• DO data output
• V_cc supply voltage
• DI data input
• ZD Zener diode
• 300 SOH monitoring system
• 302 reader device
• 304 electronic data carrier
• 306 request SOH parameter value
• 308 send SOH parameter value

Claims

1. A method for monitoring an electronic data carrier, the method comprising:

requesting a parameter value indicative of a state of health from the electronic data carrier using a reader device, wherein the requested parameter value is indicative of a change in an amount of power required to read data from the electronic data carrier, wherein the amount of power required to read data from the electronic data carrier is derived from a performance of a power rectifier embedded in said electronic data carrier;

determining the state of health of the electronic data carrier based on the requested parameter value;

estimating a remaining lifetime of the electronic data carrier based on the state of health; and

based on the estimated remaining lifetime of the electronic data carrier, performing a security preserving action prior to a breakdown of the electronic data carrier by erasing a memory of the electronic data carrier or activating a permanent reset condition to make the electronic data carrier inoperable.

2. The method as claimed in claim 1, wherein the performance of said power rectifier is determined by monitoring a voltage ripple of the power rectifier.

3. The method as claimed in claim 1, wherein the performance of said power rectifier is determined by repeatedly comparing the power received at an input of the power rectifier with the power delivered at an output of the power rectifier.

4. The method as claimed in claim 1, wherein the performance of said power rectifier is determined by monitoring an operation of a shunt regulator embedded in the electronic data carrier.

5. The method as claimed in claim 1, wherein the reader device compares said requested parameter value with further parameter values, said further parameter values being indicative of the state of health of further electronic data carriers.

6. The method as claimed in claim 1, wherein the present state of health of the electronic data carrier is determined by a dedicated interaction between the reader device and the electronic data carrier.

7. The method of claim 1, further comprising issuing a warning to a user or an issuer of the electronic data carrier regarding the electronic data carrier approaching end-of-life (EOL).

8. A system for monitoring an electronic data carrier, the system comprising: a reader device operable to request a parameter value indicative of a state of health from said electronic data carrier, wherein said reader device is arranged to determine the state of health of the electronic data carrier based on the requested parameter value indicative of said state of health from the electronic data carrier such that the requested parameter value is indicative of a change in an amount of power required to read data from the electronic data carrier, wherein the amount of power required to read data from the electronic data carrier is derived from a performance of a power rectifier embedded in said electronic data carrier, and wherein the reader device is configured to estimate a remaining lifetime of the electronic data carrier based on the state of health and to, based on the estimated remaining lifetime of the electronic data carrier, perform a security preserving action prior to a breakdown of the electronic data carrier by erasing a memory of the electronic data carrier or activating a permanent reset condition to make the electronic data carrier inoperable.

9. The system as claimed in claim 8, wherein the electronic data carrier is embedded in one of the group consisting of: a contact-bound smart card, a contactless smart card, an electronic passport, an RFID tag.

10. The method of claim 1, further comprising based on the estimated remaining lifetime of the electronic data carrier, performing an operation to impact Quality-Of-Service (QOS) to extend the lifetime of the electronic data carrier.